$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/c2af4aff-090e-31b6-a294-407b8fb7aca2.roa File: c2af4aff-090e-31b6-a294-407b8fb7aca2.roa (raw, json) Hash identifier: KzpbHBjON2swzQJtMOGynpkwAe2bcSQki0sefvkOfGU= Subject key identifier: 9E:71:B0:2B:6A:04:F5:FB:A3:CA:51:DD:5B:DD:4C:FA:D8:5A:AE:FB Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F27F25E89F2E8B3B5A4DE1800 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/c2af4aff-090e-31b6-a294-407b8fb7aca2.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 201.79.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:5e:89:f2:e8:b3:b5:a4:de:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=f6448454-d409-4fb0-ab07-da8915937ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:ec:68:f6:40:c2:f0:e5:a5:c7:3b:b4:51: 31:6a:d4:46:5f:40:43:7c:3f:67:6a:c4:8f:1c:91: b8:43:ec:3a:d8:99:4f:06:41:20:83:b4:47:15:09: 33:be:13:15:38:2c:b5:08:f8:e0:be:b2:00:7c:4f: 60:64:33:42:eb:7d:f4:a8:ee:0b:da:84:15:7f:9f: c4:1a:0b:2d:10:4f:ab:ff:2e:30:22:cf:ba:63:48: b4:33:3e:a5:92:b6:93:10:f3:7a:d2:70:6a:e8:62: 8a:a8:ad:41:b3:45:af:17:0e:0c:8c:c6:86:92:f4: 6d:32:c2:7d:ba:2b:ae:37:48:62:97:a3:77:f9:3d: 43:46:47:cc:53:0c:65:fe:1a:7e:72:6e:60:2e:0a: 0a:78:ed:b1:14:41:93:f6:85:bf:fe:37:6d:4a:01: 32:e9:3d:4c:45:fd:4c:e7:fe:86:28:5a:c4:39:35: 75:b3:94:85:88:c2:c3:eb:5c:98:e2:df:74:10:e7: a7:e4:44:a0:32:1b:de:ac:72:65:1a:3d:71:2f:7e: 15:a4:cb:1e:cd:e8:97:04:83:17:7b:75:85:43:b2: 79:1a:38:6b:39:1a:79:6f:6e:09:37:aa:54:de:c5: 42:e4:6a:e6:da:48:a9:5b:2b:8b:33:f7:4f:8d:ee: b4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:71:B0:2B:6A:04:F5:FB:A3:CA:51:DD:5B:DD:4C:FA:D8:5A:AE:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/c2af4aff-090e-31b6-a294-407b8fb7aca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 201.79.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:22:08:5f:97:1d:fc:8e:0d:ce:e1:e4:3e:e3:90:01:7b:55: dc:85:ce:4e:9d:75:47:23:91:e0:63:62:4d:cb:97:f6:e8:e4: 53:3e:be:8d:f4:c9:00:5d:cd:dd:41:57:6e:f5:57:b0:29:ff: 6e:db:3f:7d:46:41:76:e1:72:ef:e8:11:05:7e:92:b3:db:6c: c3:65:01:33:ea:a9:cd:74:98:71:92:5d:5b:2b:3a:0a:ce:4d: e2:33:a8:fc:02:ea:be:a6:c5:fb:93:04:8c:46:4a:38:13:19: 2f:a3:95:69:69:54:ca:f4:0b:e5:d3:73:a0:42:42:a6:96:3f: 03:93:b2:35:ac:94:ac:2a:5b:5b:f3:a4:84:eb:7e:33:53:96: a1:7c:8c:0d:ea:dd:41:b6:83:6f:47:5f:24:15:ca:09:81:89: 1d:82:d5:98:f8:0a:81:cb:74:6d:6c:35:0c:57:5d:c1:71:31: ed:f1:3f:0b:29:df:d3:b8:f9:47:88:d0:1c:11:3b:f5:9d:8e: 3f:07:d8:b1:cb:b7:28:b7:e5:c2:f5:1d:44:6c:57:88:60:7d: 9c:37:e6:52:63:e4:7f:9d:f4:3b:da:3e:e3:71:d6:58:40:17: 66:f1:42:da:df:8c:a1:34:fc:35:62:49:56:2a:5c:68:6f:c5: de:5e:6d:bc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8n8l6J8uiztaTeGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk ZjY0NDg0NTQtZDQwOS00ZmIwLWFiMDctZGE4OTE1OTM3YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufnsaPZAwvDlpcc7tFExatRGX0BDfD9nasSP HJG4Q+w62JlPBkEgg7RHFQkzvhMVOCy1CPjgvrIAfE9gZDNC6330qO4L2oQVf5/E GgstEE+r/y4wIs+6Y0i0Mz6lkraTEPN60nBq6GKKqK1Bs0WvFw4MjMaGkvRtMsJ9 uiuuN0hil6N3+T1DRkfMUwxl/hp+cm5gLgoKeO2xFEGT9oW//jdtSgEy6T1MRf1M 5/6GKFrEOTV1s5SFiMLD61yY4t90EOen5ESgMhverHJlGj1xL34VpMsezeiXBIMX e3WFQ7J5GjhrORp5b24JN6pU3sVC5Grm2kipWyuLM/dPje60ewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ5xsCtqBPX7o8pR3VvdTPrYWq77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYzJhZjRhZmYtMDkwZS0z MWI2LWEyOTQtNDA3YjhmYjdhY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyU8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASyIIX5cd/I4NzuHkPuOQAXtV3IXOTp11RyOR4GNiTcuX9ujkUz6+jfTJ AF3N3UFXbvVXsCn/bts/fUZBduFy7+gRBX6Ss9tsw2UBM+qpzXSYcZJdWys6Cs5N 4jOo/ALqvqbF+5MEjEZKOBMZL6OVaWlUyvQL5dNzoEJCppY/A5OyNayUrCpbW/Ok hOt+M1OWoXyMDerdQbaDb0dfJBXKCYGJHYLVmPgKgct0bWw1DFddwXEx7fE/Cynf 07j5R4jQHBE79Z2OPwfYscu3KLflwvUdRGxXiGB9nDfmUmPkf530O9o+43HWWEAX ZvFC2t+MoTT8NWJJVipcaG/F3l5tvA== -----END CERTIFICATE-----Generated at Tue Sep 22 02:50:49 2026 by rpki-client